General

  • Target

    03040163c6430e17e37b1fe8c8bb9b6c_JaffaCakes118

  • Size

    1.8MB

  • MD5

    03040163c6430e17e37b1fe8c8bb9b6c

  • SHA1

    d569ea0159d6c3fac198754c61a57763050a0e01

  • SHA256

    a6ab12a2c1bf654de496aa861d4471803e479ef31f11168d7cf18055942cc4b2

  • SHA512

    0526c9abf9c984fc96a0a8de1725bdd8e8af2070a88dee7904e3dba30cbf1818fb95b6e63735125084449bff61278204557a4c3391e0f82e3f28c1775a3fd078

  • SSDEEP

    49152:Lz071uv4BPMkibTIA5lCx7kvRWa4p1HzDgU7yKS:NAB2

Score
10/10

Malware Config

Signatures

  • XMRig Miner payload 1 IoCs
  • Xmrig family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 03040163c6430e17e37b1fe8c8bb9b6c_JaffaCakes118
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections